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Server ORB receives 
method request from 
client 



Direct request to 
EJB container for 
requested EJB object 



EJB container sends 
security role and 
name of requester 

to security software 
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Direct request to 
Non-EJB CORBA 
object 



Security software 
initiates and sends 
an exception to 
requester via 
container and then 
ORB 
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Non-EJB CORBA 
object sends name 

of shadow EJB 
object and name of 
requested method 
to security service 




Security software 
sends authorization 
to container, which 

returns requested 
method to requester 
via ORB 



Security software 
initiates and sends 
an exception to 
requester via ORB 



Security software 
sends authorization 
to Non-EJB object, 

returns requested 
method to requester 
via ORB 
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